Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/L-j8m1cRG3u4u2O8E35FaXpJTlA.roa
File:                     L-j8m1cRG3u4u2O8E35FaXpJTlA.roa (raw, json)
Hash identifier:          n4H0MDo/CFvXwvMvYRhGH7KPGaUiCoWl97GYY+35cOU=
Subject key identifier:   2F:E8:FC:9B:57:11:1B:7B:B8:BB:63:BC:13:7E:45:69:7A:49:4E:50
Certificate issuer:       /CN=4cf8ffc088591e4f243baafa21b4298bfb366026
Certificate serial:       0F9EEFEB
Authority key identifier: 4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/L-j8m1cRG3u4u2O8E35FaXpJTlA.roa
Signing time:             Sat 01 Jan 2022 00:51:06 +0000
ROA not before:           Sat 01 Jan 2022 00:51:06 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     41167
IP address blocks:        217.110.62.0/24 maxlen: 24
                          217.111.44.0/24 maxlen: 24

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 262074347 (0xf9eefeb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4cf8ffc088591e4f243baafa21b4298bfb366026
        Validity
            Not Before: Jan  1 00:51:06 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=2fe8fc9b57111b7bb8bb63bc137e45697a494e50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:ed:ae:c2:c7:e8:b0:e4:4f:29:19:7a:00:2b:
                    76:7a:1c:59:b3:57:a3:c3:de:4b:c3:2f:60:55:3c:
                    07:36:d9:9f:7d:33:12:8b:0a:f3:58:f1:af:db:9b:
                    78:5e:fa:68:1a:30:d3:b3:dd:c4:39:4b:9b:16:8b:
                    2e:f9:05:13:d2:98:4c:eb:f4:68:ff:6b:4f:9a:f5:
                    7e:72:18:e2:0f:ea:ed:7a:1f:48:ca:7f:f4:27:c8:
                    7c:51:5d:c5:36:59:c2:00:5b:29:29:80:a9:a1:58:
                    1f:89:0a:91:4b:a6:79:56:24:0b:2a:7a:f8:e4:20:
                    af:7a:72:1b:30:7d:47:94:95:10:19:5c:8e:1f:b2:
                    66:a0:ed:28:cd:33:5a:da:66:24:c1:2d:8c:57:67:
                    5a:78:97:00:ba:38:9b:80:1a:73:f7:54:98:13:5f:
                    d6:6f:be:43:e2:78:6a:43:82:f3:af:3a:0f:04:64:
                    54:73:89:7e:d6:ca:45:7c:28:4f:49:d2:cd:e5:87:
                    68:a2:19:ce:ef:45:ec:49:90:d2:b7:9b:d4:49:b4:
                    5d:20:99:74:e4:4f:8c:0c:c9:ae:f6:79:a3:ca:52:
                    ef:05:31:86:91:a1:8e:35:35:e2:34:96:ff:0a:72:
                    fd:2a:77:f0:fb:25:5e:af:97:c3:6e:26:b5:fb:14:
                    88:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:E8:FC:9B:57:11:1B:7B:B8:BB:63:BC:13:7E:45:69:7A:49:4E:50
            X509v3 Authority Key Identifier:
                keyid:4C:F8:FF:C0:88:59:1E:4F:24:3B:AA:FA:21:B4:29:8B:FB:36:60:26

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TPj_wIhZHk8kO6r6IbQpi_s2YCY.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/L-j8m1cRG3u4u2O8E35FaXpJTlA.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/2b/a0a39c-be03-47bb-bdb3-b3b78b0b66ea/1/TPj_wIhZHk8kO6r6IbQpi_s2YCY.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  217.110.62.0/24
                  217.111.44.0/24

    Signature Algorithm: sha256WithRSAEncryption
         91:ce:db:3c:51:ec:ba:45:dd:c4:26:89:c3:46:42:84:85:0b:
         6b:39:c8:1e:7b:43:7f:9b:36:5b:eb:af:d8:2b:34:fc:64:b3:
         47:f6:90:41:a5:fc:bb:d1:29:16:85:eb:38:b2:a6:77:aa:37:
         e3:c6:5e:01:da:b3:3c:28:77:a8:19:62:c9:49:1c:ca:02:52:
         eb:c9:f1:6b:d5:37:ef:6e:41:59:66:71:93:e2:15:3d:38:a6:
         b1:e4:2c:02:6d:5a:15:34:a9:56:b8:fe:cd:ce:0c:11:71:17:
         3d:44:44:8f:d5:82:fd:e1:97:61:43:4f:f1:d8:49:97:b6:aa:
         92:2a:8c:71:e3:db:93:d0:36:92:88:28:a1:80:ae:db:53:f5:
         f3:68:bf:33:80:b2:fc:4f:d0:7f:74:c2:9b:80:cb:ae:17:39:
         67:02:45:74:f8:0b:33:db:ae:a1:3d:78:15:31:48:fd:c2:84:
         b5:33:2f:b4:29:c0:00:93:c5:5e:ae:cf:a9:e6:62:43:ff:6e:
         85:ed:52:89:e1:3a:46:62:bb:7d:8f:c9:0b:6a:72:59:62:1a:
         e5:95:65:59:7e:01:04:ef:ad:d6:5d:dd:6d:d4:28:41:0b:86:
         15:ea:d8:e8:8b:14:03:07:0e:61:20:e7:f1:cc:6c:0e:67:86:
         c4:7c:d9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 19:00:28 2024 by rpki-client on console-ams.rpki-client.org